Privacy Policy

GovLens Ltd ("GovLens", "ClearPath", "we", "us", "our") operates the ClearPath intelligence platform. We are committed to protecting your privacy and handling personal information transparently and responsibly. This policy explains what we collect, how we use it, the legal bases we rely on, and the rights you have.

We comply with the Australian Privacy Principles under the Privacy Act 1988 (Cth) and, where applicable, the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. For UK and EEA matters, GovLens Ltd acts as the data controller.

Information we collect

Information you provide. Name, business email, organisation, role, and the content of any message when you contact us, request a briefing, or otherwise correspond with our team.

Information collected automatically. IP address, device and browser type, pages visited, referring URLs, approximate location derived from IP, and similar technical information, including via strictly necessary cookies and limited analytics.

Customer platform data. Account details, authentication metadata, usage events, queries, saved alerts and audit logs generated when authorised users interact with the ClearPath platform.

Public-source intelligence

ClearPath's intelligence products are derived from publicly available sources — government publications, parliamentary records, regulatory filings, planning portals, court and tribunal records, news media, public social media posts and other open data. We do not target private individuals; references to named persons are limited to public figures acting in a public, political, regulatory or commercial capacity, and are processed in the legitimate interests of our customers in understanding political, regulatory and community risk.

How we use information

• To respond to enquiries and provide requested briefings.
• To deliver, secure, monitor and improve the ClearPath platform.
• To produce intelligence products for authorised customers.
• To detect, prevent and respond to fraud, abuse and security incidents.
• To comply with legal, regulatory and contractual obligations.

Legal bases (UK/EEA)

We rely on (a) legitimate interests for operating, securing and improving the platform and producing public-source intelligence, balanced against your rights; (b) contract for delivering services to customers; (c) consentwhere required, for example for non-essential cookies or marketing; and (d) legal obligation where applicable.

Sharing and disclosure

We do not sell personal information. We share information only with: vetted service providers (cloud hosting, infrastructure, analytics, email) bound by confidentiality and data-processing terms; authorised customers of the ClearPath platform; professional advisers; and authorities where required by law or to protect our rights and the safety of others.

International transfers

ClearPath is operated globally and personal information may be transferred to, stored in, or accessed from countries outside Australia or the United Kingdom, including the European Economic Area and the United States. Where we transfer personal data out of the UK or EEA, we use the UK International Data Transfer Agreement, the EU Standard Contractual Clauses, or another lawful transfer mechanism, together with appropriate technical and organisational safeguards.

Retention

We retain personal information only for as long as necessary for the purposes set out in this policy, to comply with our legal obligations, resolve disputes and enforce our agreements. Retention periods vary by data type and customer contract; we apply a "minimum necessary" standard by default.

Security

We apply industry-standard administrative, technical and physical safeguards, including encryption in transit and at rest, least-privilege access, secret management, continuous monitoring, vulnerability management, secure software development practices and regular third-party testing. No system is perfectly secure; we continuously review and improve our controls and will notify affected parties of any eligible data breach in accordance with applicable law.

Cookies

We use strictly necessary cookies to operate our website and limited analytics to understand aggregate usage. Where required, we obtain consent for non-essential cookies and you can withdraw consent at any time through your browser settings.

Children

ClearPath is a business-to-business service and is not directed at children. We do not knowingly collect personal information from anyone under 16.

Your rights

Subject to applicable law, you may request access to, correction of, deletion of, or restriction of personal information we hold about you; object to certain processing; request portability; and withdraw any consent you have given. You may also lodge a complaint with the Office of the Australian Information Commissioner (OAIC) or, in the UK, the Information Commissioner's Office (ICO).

Changes to this policy

We may update this policy from time to time. Material changes will be highlighted on this page with a revised "last updated" date.

Contact

For privacy enquiries, access requests or complaints, contact us at contact@clearpathintel.app.